Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File:                     Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier:          d21nhXi/Qjo7dyDZrhMFKiyVocPHDzXuwmtL982alPU=
Subject key identifier:   ED:31:1A:B2:B1:5D:68:A0:BD:29:93:08:EB:E1:57:FA:20:4D:CE:69
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer:       /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial:       01976CCF9F717669BA983A02828F6312864E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number:          0A0D
Signing time:             Sat 14 Jun 2025 05:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:35 +0000
Files and hashes:         1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: QAKNT+bRLix9aTw2rUktwAQtRc8D/ebxaM+AEWkE3Qk=)
                          2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:9f:71:76:69:ba:98:3a:02:82:8f:63:12:86:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
        Validity
            Not Before: Jun 14 05:00:35 2025 GMT
            Not After : Jun 15 05:00:35 2025 GMT
        Subject: CN=ed311ab2b15d68a0bd299308ebe157fa204dce69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:0b:d5:3f:21:a6:20:5b:67:c5:d1:ad:4d:
                    fb:ff:a9:53:1c:ed:65:45:9d:ca:35:a6:89:37:d3:
                    00:a2:e2:49:fd:05:b4:36:67:87:ab:50:55:1d:c0:
                    ff:a6:65:87:c2:da:e7:99:e5:ca:a6:92:14:0b:6d:
                    0e:bb:e7:aa:2f:15:0f:41:34:9d:74:fd:4c:ca:c0:
                    b7:fe:6d:7a:27:30:a1:f6:47:3e:a9:3e:4d:56:a0:
                    d1:55:f9:f1:fa:83:db:0b:49:95:6a:46:03:10:bd:
                    ca:43:05:ca:20:6c:41:8d:ba:09:88:f1:4b:20:a6:
                    52:50:e2:3f:41:0e:a0:fd:17:a1:07:0b:e2:7e:89:
                    7b:0f:24:46:3e:a2:12:1a:9f:bf:27:aa:52:1f:8f:
                    25:e6:cb:d3:98:f7:30:ab:17:29:b5:bd:3d:fd:23:
                    c3:25:3a:ab:0e:58:7a:4b:8a:52:2a:ae:af:07:58:
                    63:07:ff:14:93:49:29:c5:22:ce:98:17:f9:b4:5a:
                    ea:0f:c2:da:de:33:01:38:61:6c:2c:58:23:4e:30:
                    54:d2:4b:27:e5:60:48:50:28:59:c8:be:6f:fb:27:
                    57:13:f0:10:84:06:db:35:05:9d:64:23:f9:1e:85:
                    bb:54:e9:c8:f4:9a:eb:56:71:b5:4d:65:89:47:c8:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:1A:B2:B1:5D:68:A0:BD:29:93:08:EB:E1:57:FA:20:4D:CE:69
            X509v3 Authority Key Identifier:
                keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:43:02:ba:bd:dc:a2:20:21:a6:57:06:b7:93:cb:f8:dd:
         f9:27:e2:f0:72:89:16:4e:0f:0c:49:25:57:16:9e:6a:e2:d2:
         9d:73:a8:10:51:3f:a4:04:14:bb:4c:c9:d2:e4:a8:bf:6c:bf:
         1e:6c:e1:32:fb:29:5a:c4:ca:70:3f:0e:ee:88:65:6e:09:f6:
         62:d0:06:75:d1:d4:d3:af:ff:59:c4:cd:29:d7:5e:bb:26:f9:
         87:4a:1e:42:aa:85:a6:0f:c3:44:e3:41:36:69:98:ad:4f:d8:
         a2:b4:c0:2a:92:45:8f:9d:30:de:99:3f:87:87:14:ee:d5:37:
         55:0b:a0:f4:a6:2f:90:64:9c:81:a7:bd:40:1c:ab:ee:42:5e:
         3f:df:a7:7b:0a:e2:79:04:30:ea:10:e4:11:59:cb:3f:5b:b2:
         ce:45:2b:1c:0e:59:f7:0a:d0:a5:41:11:dc:22:7e:a7:d2:72:
         59:bf:ce:70:cb:bf:15:bd:be:96:32:4a:ff:48:be:cf:ac:72:
         6d:bb:cf:1b:ec:4f:66:96:4f:1e:fb:61:20:5f:5b:47:14:69:
         df:3f:f5:67:8d:c4:f7:65:53:4f:f0:4c:a8:02:e4:d4:01:db:
         ff:98:de:fc:8e:e1:50:80:88:b5:ba:65:26:ca:1a:5a:a4:3e:
         a7:0e:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:40 2025 by rpki-client